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C. AMENDMENTS TO THE CLAIMS 

1. (Currently Amended) A method of managing customer security 
features by a security server, said method comprising: 
receiving a request from a roquootor? 

receiving an edit request from a customer, the edit request 
including a customer identifier and one or more 
updated security features , the updated security 
features each including a security item identifier; 
authenticating the customer; rcquootor ; — aftdr 

locating a stored security feature corresponding to each of 
the security item identifiers, wherein the stored 
security features are stored in a data area 
corresponding to the customer; and 
manipulating one or more of the stored security features 
stored in ^ the data area corresponding to a- the 
customer in response to the request , wherein the 
manipulating includes replacing the stored security 
features with the updated security features ♦ 

(Currently Amended) The method as described in claim 1 
wherein at least one of the stored security features is 
selected from the group consisting of a photograph of the 
customer, a customer signature, a digital signature 
corresponding to the customer, a fingerprint, and a 
description of the customer . 

(Currently Amended) The method as described in claim 1 
further comprising: 

receiving one or more new security features from the 
customer; 
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assigning aa- a new item identifier to each of the new 

security features; and 
storing the new security features in the data area 

corresponding to the customer. 

4. (Currently Amended) The method as described in claim 1 
further comprising : 

receiving an authorization from a the customer, the 

authorization including a first merchant identifier; 
storing the authorization; 

receiving a retrieval request from a merchant, the 

retrieval request including & the customer identifier 
corresponding to the customer and a second merchant 
identifier corresponding to the merchant; 

validating the merchant request, the validating including: 
retrieving the authorization; and 

comparing the first merchant identifier to the second 
merchant identifier; and 
returning one or more of the stored security features 

corresponding to the customer in response to the first 
merchant identifier matching the second merchant 
identifier . 

5. (Currently Amended) The method as described in claim 1 
further comprising : 

receiving an authorization from a the customer, the 

authorization including a public key corresponding to 
the a merchant; 

storing the authorization and the merchant's public key; 

receiving an encrypted retrieval request from the 

merchant, the encrypted retrieval request encrypted 
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6. 
7. 



using a private key corresponding to the merchant's 
public key; 

deciphering the encrypted retrieval request using the 

stored public key; and 
returning one or more of the stored security features 

corresponding to the customer in response to the 

deciphering. 

(Cancelled ) 

{Currently Amended) The method as described in claim -6 
further comprising s 1, wherein the authenticating 
comprises^ 

verifying the cuotomor/ — the verifying including t 

receiving a secret customer identifier from the 
customer; and 

comparing the secret customer identifier with a stored 
secret customer identifier corresponding to the 
{ customer • 

(Currently Amended) The method as described in claim 1 
wherein the request includes an encrypted packet that is 
encrypted using a private key corresponding to the 
requeator , customer, the method further comprising: 
locating a stored public key corresponding to the 

roquoafco'r ; customer; and 
deciphering the encrypted packet using the stored public 
key, the deciphering verifying the identity of the 
requestor/ customer, wherein the manipulating is 
performed in response to the encrypted packet being 
successfully deciphered. 
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9. (Currently Amended) An information handling system 
comprising: 

one or more processors; 

a memory accessible by the processors; 

a network interface for communicating with other 

information handling systems ; 
one or more nonvolatile storage areas accessible by the 

processors; and 
a security feature management tool to manage customer 

security features, the security feature management 

tool including: 

means for r e ceiving a roquoot from a requestor; 

means for receiving an edit request from a customer f 
the edit request including a customer identifier 
and one or more updated security features r the 
updated security features each including a 
security item identifier; 

means for authenticating the rcquootor ; - customer; 

means for loading a stored security feature 

corresponding to each of the security item 
identifiers, wherein the stored security features 
are stored in a data area corresponding to the 
customer; and 

means for manipulating one or more of the stored 
security features stored in e the data area 
corresponding to et the customer in response to 
the request , wherein the manipulating includes 
replacing the stored security features with the 
updated security features . 
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10. (Currently Amended) The information handling system as 
described in claim 9 wherein the request includes an 
encrypted packet that is encrypted using a private key 
corresponding to the rcqucator , customer , the information 
handling system further comprising: 

means for locating a stored public key corresponding to the 
roquootor; customer; and 

means for deciphering the encrypted packet using the stored 
public key, the deciphering verifying the identity of 
the roquootor , customer/ wherein the manipulating is 
performed in response to the encrypted packet being 
successfully deciphered. 

11. (Currently Amended) The information handling system as 
described in claim 9 further comprising: 

means for receiving an authorization from a the customer, 
the authorization including a first merchant 
identifier; 

means for storing the authorization; 

means for receiving a retrieval request from a merchant, 
the retrieval request including a: the customer 
identifier corresponding to the customer and a second 
merchant identifier corresponding to the merchant; 

means for validating the merchant request, the validating 
including: 

retrieving the authorization; and 

comparing the first merchant identifier to the second 



means for returning one or more of the stored security 

features corresponding to the customer in response to 



merchant identifier; and 
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the first merchant identifier matching the second 
merchant identifier. 

12, (Currently Amended) The information handling system as 
described in claim 9 further comprising: 

means for receiving one or more new security features from 
the customer; 

means for assigning a** a new item identifier to each of the 

new security features; and 
means for storing the new security features in the data 

area corresponding to the customer. 

13. {Currently Amended) A computer program product stored on a 
computer operable medium for managing customer security 
features by a security server, said computer program 
product comprising: 

mcano for receiving a request from a requestor ; 

means for receiving an edit request from a customer , the 
edit request including a customer identifier and one 
or more updated security features f the updated 
security features each including a security item 
identifier ; 

means for authenticating the requestor; and customer; 

means for locating a stored security feature corresponding 
to each of the security item identifiers, wherein the 
stored security features are stored in a data area 
corresponding to the customer; and 

means for manipulating one or more of the stored security 
features stored in a: the data area corresponding to ^ 
the customer in response to the request , wherein the 
manipulating includes replacing the stored security 
features with the updated security features. 
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14. (Currently Amended) The computer program product as 
described in claim 13 wherein at least one of the stored 
security features is selected from the group consisting of 
a photograph of the customer r a customer signature, a 
digital signature corresponding to the customer, a 
fingerprint, and a description of the customer. 

15. (Currently Amended) The computer program product as 
described in claim 13 further comprising: 

means for receiving one or more new security features from 
the customer; 

means for assigning -a** a new item identifier to each of the 

new security features; and 
means for storing the new security features in the data 

area corresponding to the customer. 

16. (Currently Amended) The computer program product as 
described in claim 13 further comprising: 

means for receiving an authorization from a- the customer, 
the authorization including a first merchant 
identifier; 

means for storing the authorization; 

means for receiving a retrieval request from a merchant, 
the retrieval request including a- the customer 
identifier corresponding to the customer and a second 
merchant identifier corresponding to the merchant; 

means for validating the merchant request, the validating 
including: 

retrieving the authorization; and 

comparing the first merchant identifier to the second 
merchant identifier; and 
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means for returning one or more of -the stored security 

features corresponding to the customer in response to 
the first merchant identifier matching the second 
merchant identifier . 

17* (Currently Amended) The computer program product as 
described in claim 13 further comprising: 

means for receiving an authorization from a the customer, 

the authorization including a public key corresponding 
to the merchant? 

means for storing the authorization and the merchant's 
public key; 

means for receiving an encrypted retrieval request from a 
merchant, the encrypted retrieval request encrypted 
using a private key corresponding to the merchant's 
public key; 

means for deciphering the encrypted retrieval request using 

the stored public key; and 
means for returning one or more of the stored security 

features corresponding to the customer in response to 

the deciphering. 

18. (Cancelled) 

19. (Currently Amended) The computer program product as 
described in claim 1 8 further comprising : 13 , wherein the 
means for authenticating comprises: 

raoano — for verifying the customer, — the verifying including i 
means for receiving a secret customer identifier from 
the customer; and 
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means for comparing the secret customer identifier 
' with a stored secret customer identifier 
corresponding to the customer. 

20- (Currently Amended) The computer program product as 

described in claim 13 wherein the request includes an 
encrypted packet that is encrypted using a private key 
corresponding to the roquoator, customer , the computer 
program product further comprising: 

means for locating a stored public key corresponding to the 
requestor y customer; and 

means for deciphering the encrypted packet using the stored 
public key, the deciphering verifying the identity of 
the requestor , customer, wherein the manipulating is 
performed in response to the encrypted packet being 
successfully deciphered. 
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